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Amendments tolthe Claims 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

Listing of Claims j [ 

i 

Claim 1 (Currently amended): A communication system having a server for providing a Web 

E-mail service to a Web browser of a client, wherein said server comprises: 

i 

management means for managing a secret key for decrypting an encrypted E-mail 

message addressed to .a user's mail address, the E-mail message bei ng encrypted by a public 

i , 
kev corresponding to the user's mail address, wherein the secret key correspond ing to the 

user's mail address for decrypting the encrypted E-mail message is not managed by the Web 
browser of the client; 

web encryption communication means Reestablishing a Web encryption 
communication with the Web browser of the client, and communicating with the Web browser 
of the client by the Wjeb encryption communication established by said web encryption 
communication meanls; 

authentication! means for executing authentication of a use allowance of the secret key 

i 

managed by said management means to the Web browser of the client when the Web browser 

i 

o£ the client requests to decrypt the encrypted E-mail message while the server communicates 

| ; 

with the client by said established Web encryption communication; 

; I i 

decrypting means for making a decrypted message by decrypting the encrypted E-mail 

message using the secret key managed by said management means, the secret kev 
~ | j 

corresponding to the (user's mail address, in the case where the use allowance of the secret key 
managed by said management means is authenticated by said authentication means; and 
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transmission control means for controlling to transmit the decrypted E-mail message 

i 

! ! , . . . 

decrypted by said decijypting means to the client through the Web. encryption communication 

i i 

established by said we|b encryption communication means. 
Claim 2 (Cancelled) 

Claim 3 (Previously presented): The communication system according to claim 1, wherein 
said authentication mians provides said client with a window data to authenticate the use 

i 

allowance of the managed key. [ 

i : 

Claim 4 (Previously presented): The communication system according to claim 1, wherein 

said authentication means authenticates the use allowance using a passphrase inputted from 

i 

said client. . 

Claim 5 (Previously presented): The communication system according to claim 1, wherein 

I ; 

said authentication means authenticates the use allowance based on a biometrics information of 

! . 

a user inputted from sjaid client. 

Claim 6 (Previously presented): The communication system according to claim 1> wherein 

! 

said web encryption communication means establishes the Web encryption communication 
with the client by using SSL. : 

i 
i 

Claim 7 (Cancelled).' 

Claim 8 (Previously presented): The communication system according to claim 1, wherein 
said authentication means authenticates the use allowance of the managed key during a session 
. of the Web encryption communication continuously established between said client and a 



server. 



i 



Claim 9 (Previously presented): The communication system according to claim 8, wherein 
said authentication Jeans stops said authenticated use allowance, in the case where at least 
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either the case where the Web encryption communication is ended with an error or the case 
where the Web encryption communication has passed a fixed time is satisfied. 

Claim 10 (Previously presented): The communication system according to claim 1, wherein 

i 

said server further comprises signature means for executing a digital signature to an E-mail 

created by said client. 

i 

Claim 11 (Previouslyj presented): The communication system according to claim 1, wherein 
said server further comprises: j 

multiple use judging means forjudging whether the managed key is under multiple use, 

and 

i 

stop means for stopping the use allowance of a session under multiple use in the case 
where the session is judged to be under multiple use by said multiple use judging means. 
Claim 12 (Previously presented): The communication system according to claim 1, wherein 
the key for decrypting the encrypted E-mail is a secret key in a code of a public key 
cryptosystem, i j 

Claim 13 (Currently amended): A communication system having a client receiving a Web E- 
mail service from a server, wherein the server comprises: 

management means for managing a secret key for decrypting an encrypted E-mail 
message addressed to a user's mail address, the E-mail message being encrypted bv a public 
key corresponding tolthe user's mail address, wherein the secret key corresponding to the 
user's mail address for decrypting the encrypted E-mail message is not managed by the Web 
browser of the client; , 

web encryption communication means for establishing a Web encryption 

j i 

communication with' the Web browser of the client, and communicating with the Web browser 
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of the client by the Web encryption communication established by said web encryption 
communication means; 

authentication means for executing authentication of a use allowance of the secret key 
managed by said management means to the Web browser of the client based on authentication 
information sent from 1 the client when the Web browser of the client requests to decrypt the 
encrypted E-mail message while the server communicates with the client by the established 
Web encryption communication; 

decrypting means for making a decrypted message by decrypting the encrypted E-mail 
message using the secret key managed by said management means, the secret key 
corresponding to the user's mail address, in the case where the use allowance of the secret key 
managed by said management means is authenticated by said authentication means; and 

transmission control means for controlling to transmit the decrypted E-mail message 
decrypted by said decrypting means to the client through the Web encryption communication 
established by said Web encryption communication means, and 

wherein the client comprises: 

request means for requesting to decrypt the encrypted E-mail message while said Web 
encryption communication is established between the server and the Web browser of the client; 

authentication information sending means for sending the authentication information to 
said authentication mjeans; and 

receiving means for receiving the decrypted E-mail message transmitted by said 
transmission control means through the Web encryption communication established by said 

i 

Web encryption communication means. 

i 

Claim 1 4 (Currently amended): A method for controlling a communication system including a 

1 
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! 

server for providing a Web browser of a client with a Web E-mail service, comprising: 

a management istep of managing a secret key for decrypting an encrypted E-mail 
message addressed to a user's mail address, the E-mail message being encrypted bv a public 

key corresponding to the user's mail address, wherein the secret key corresponding to the 

i 

user's mail address for decrypting the encrypted Ermail message is not managed by the Web 
browser of the client; 

a web encryption communication step for establishing a Web encryption 
communication with the Web browser of the client, and communicating with the Web browser 
of the client by the Web encryption communication established in said web encryption 
communication step; ! 

an authentication step of executing authentication of a use allowance of the secret key 
managed in said management step to the Web browser of the client when the Web browser of 
the client requests to decrypt the encrypted email message while the server communicates with 
the client by said established Web encryption communication; 

a decrypting step of making a decrypted message by decrypting the encrypted E-mail 
message using the secret key managed in said management step, the secret key corresponding 
to the user's mail address, in the case where the use allowance of the secret key managed in 
said management step is authenticated in said authentication step; and 

! 

a transmission control step of controlling tjo transmit the decrypted E-mail message 
decrypted in said decrypting step to the client through the Web encryption communication 

! • i 

established in the weft encryption communication! step. 

! 

Claim 15 (Cancelled) 

Claim 1 6 (Previously presented): A method for controlling the communication system 

I ! 
j 

i - 6 - . 
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according to claim 14, wherein, in said authentication step, a window date for authenticating 
the use allowance of the managed key is supplied to said client for authentication. 
Claim 17 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, the use allowance is authenticated 
using a passphrase inputted from said? client 

Claim 18 (Previously presented): A method for controlling the communication system 

according to claim 14, wherein, in said authentication step, the use allowance is authenticated 

based on biometrics information of a user inputted from said client 

Claim 19 (Previously presented): A method for controlling the communication system 

according to claim 14, wherein, in said server, said web encryption communication step 

establishes the Web encryption communication with the client by using SSL. 

Claim 20 (Cancelled). 

Claim 21 (Previously presented); A method for controlling the communication system 
according to claim 14, wherein, in said authentication step, the use allowance of the managed 
key is authenticated during a session of the Web encryption communication continuously 
established between said client and a server. 

Claim 22 (Previously presented): A method foT controlling the communication system 
according to claim 21, wherein, in said authentication step, said authenticated use allowance is 
stopped in the case when at least either the case where the Web encryption communication is 
ended with an error or the case where the Web encryption communication has passed a fixed 
time is satisfied. 

Claim 23 (Previously presented): A method for controlling the communication system 
according to claim 14, further comprising a signature step of executing the digital signature to 

-1- \ i 
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the E-mail created by said client in said server. 

Claim 24 (Previously presented): A method for controlling ihe communication system 
according to claim 14, further comprising a step of executing a multiple use judging step of 
judging whether the managed key is under multiple use in the server, and a stop step of 
stopping the use allowance of a session under multiple use in the case where the session is 
judged to be under multiple use in said multiple use judging step. 
Claim 25 (Previously presented): A method for controlling the communication system 
according to claim 14, wherein the key for decrypting the encrypted E-mail is a secret key in an 
encryption of a public key cryptosystem, 

Claim 26 (Currently amended): A method for controlling a communication system including a 
client receiving a Web E-mail service from a server, comprising: 

a step of executing a management step of managing a secret key for decrypting an 
encrypted E-mail message addressed to a user's mail address, the E-mail message being 
encrypted by a public kev corresponding to the user's mail address, wherein the secre t key 
corresponding to the user's mail address for decrypting the encrypted E-mail message is not 
managed by the Web browser of the client, 

a web encryption communication step for establishing a Web encryption 

communication with the Web browser of the client, and communicating with the Web browser 

i 

i 

of the client by the Web encryption communication established in said web encryption 
communication step,. 

an authentication step of executing authentication of a use allowance of the secret key 
managed in said management step to the Web browser of the client based on authentication 

* • i 

information sent from said client when the Web browser of the client rcguests to decrypt the 

i 
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encrypted E-mail message while the server commiiinicates with the client by the established 
Web encryption communication, 

a decrypting step of making a decrypted message by decrypting the encrypted E-mail 
message using the secret key managed in said management step , the secret key cor responding 

to the user's mail address, in the case where the use allowance of the secret key managed in 

i 

said management step is authenticated in said authentication step, and 

a transmission control step of controlling to transmit the decrypted E-mail message 

decrypted in said decrypting step to the client through the Web encryption communication 

t 
t 

established in said web encryption communication step, 
wherein the client comprises: 

a requesting step of requesting to decrypt the encrypted E-mail message while said Web 
encryption communication is established between the server and the Web browser of the client, 

an authentication information sending step of sending the authentication information for 
authentication in said| authentication step, and 

a receiving step of receiving the decrypted E-mail message transmitted in said 

I 

transmission step to the client through the Web encryption communication established in the 

web encryption communication step. 

i 

Claim 27 (Currently amended): A computer executable control program of a communication 
system including a server for providing a Web E-mail service to a Web browser of a client, said 

program comprising a management step of managing a secret key for decrypting an encrypted 

t : 

E-mail message addressed to a user's mail addresls, the E-mail message being encrypted by a 

! 

public key corresponding to the user's mail address, wherein the secret key corresponding to 

I < I 

the user's mail address for decrypting the encrypted E-mail message is not managed by the 

-9- ! j 
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i 

Web browser of the cljient, a web encryption communication step for establishing a Web 

encryption communication with the Web browser of the client, and communicating with the 

i 

Web browser of the client by the Web encryption communication established in said web 
encryption communication step, an authentication istep of executing authentication of a use 
allowance of the secret key managed in said management step to the Web browser of the client 

i 

when the Web browser of the client requests to deprypt the encrypted E-mail message while the 
server communicates with the client by said estabiished Web encryption communication, a 
decrypting step of making a decrypted message bv decrypting the encrypted E-mail message 
using the secret key managed in said management step , the secret key correspondin g to the 
user's mail address, in the case where the use allowance of the secret key managed in said 
management step is authenticated in said authentication step, and a transmission control step of 
controlling to transmit the decrypted E-mail message decrypted in said decrypting step to the 
client through the Web encryption communication established in said web encryption 
communication step, j 

Claim 28 (Currently [amended): A control program of a communication system including a 
client receiving a Web E-mail service through a Web from a server, comprising a Step of 
executing a management step of managing a secret key for decrypting an encrypted E-mail 
message addressed to a user's mail address, the E-mail message being encry pted by a public 
key corresponding tci the user's mail address, wherein the secret key corresponding to the 
user's mail address fpr decrypting the encrypted E-mail message is not managed by the Web 



browser of the client; a web encryption cornmun Ration step for establishing a Web encryption 
i . i 

j i ' 

communication with; the Web browser of the client, and communicating with the Web browser 

i 

of the client by the Web encryption communication established' in said web encryption 

-10- ! 
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communication step, an authentication step of executing authentication of a u$e allowance of 

the secret key managed in said management step to the Web browseT of the client based on 

i 

authentication information sent from the client whfen the Web browser of the client requests to 

i 

i 

decrypt the encrypted !E-mail message while the server communicates with the client by the 

established Web encryption communication, a decrypting step of making a decrypted message 

i 

by decrypting the encrypted E-mail message using the secret key managed in said management 
step > the secret key corresponding to the user's mail address, in the case where the use 

allowance of the secret key managed in said management step is authenticated in said 

i 

authentication step, and a transmission step of coritrolling to transmit the decrypted E-mail 
message decrypted in: said decrypting step to the client through the Web encryption 
communication established in the web encryptionlcommunication step, and the client 
comprising a requesting step of requesting to decrypt the encrypted E-mail message while said 
Web encryption communication is established between the server and the Web browser of the 
client, an authentication information sending step of sending the authentication information for 

i 

auihentication in said : authentication step, and a receiving step of receiving the decrypted E- 
mail message transmitted in said transmission step to the client through the Web encryption 

communication established in said web encryption communication step. 

i 

Claim 29 (Currently ;Amended): A storage medium storing a computer executable control 
i 

i , 
program of a communication system including a server of providing a Web E-mail service to a 

Web browser of a client, the program comprising; a step of executing a management step of 

managing a secret key for decrypting said encrypted E-mail message addressed to a user's mail 

I ! 
I 1 

address using said manag e d secret key, the E-maii] message being encrypted by a public key 



corresponding to the 
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mail address for decrypting the encrypted E-mail message is not managed by the Web browser 
of the client, a web encryption communication step of establishing a Web encryption 
communication with the Web browser of the client, and communicating with the Web browser 

! 

of the client by the Web encryption communication established in said web encryption 
communication step, an authentication step of executing authentication of a use allowance of 
the secret key managed in said management step to the Web browser of the client when the 
Web browser of the client requests to decrypt the encrypted E-mail message while the server 
communicates with the client by said established Web encryption communication, and a 
transmission control step of controlling to transmit the decrypted E-mail message to the client 

i ... 

through the Web encryption communication established in said web encryption communication 

i 

step. j 

i 

Claim 30 (Currently amended): A storage medium storing a control program of a 

communication system including a client receiving a Web E-mail service through a Web from a 

j 

server, wherein the program comprises a step of executing a management step of managing a 
secret key for decrypting an encrypted E-mail message addressed to a user's mail address, the 

E-mail messaae being encrypted bv a public key corresponding to the user's mai l address, 

i 

wherein the secret key corresponding to the user's mail address for decrypting the encrypted E- 

j 

mail message is not managed by the Web browser of the client, a web encryption 

j j 
communication step of establishing a Web encryption communication with the Web browser of 

the client, and communicating with the Web browser of the client by the Web encryption 

i ; 
i 

communication established in said web encryption communicaiion step, an authentication step 
of executing authentication of a use allowance ofjthe secret key managed in said management 
step to the Web browser of the client based on authentication information sent from the client 

-12 
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when the Web browser of the client requests to decrypt the encrypted E-mail message while the 
server communicates with the client by said established Web encryption communication, a 

i 

decrypting step of making a decrypted message by| decrypting the encrypted E-mail message 
using the secret key m'anaged in said management step in the serve r, the secret key 
corresponding to the user's mail address, in the case where the use allowance of the secret key 
managed in said management step is authenticated in said authentication step, and a 

transmission control step of controlling to transmit the decrypted E-mail message decrypted in 

j 

said decrypting step to the client through the Web encryption communication established in 

said web encryption communication step, the client comprising a requesting step of requesting 

i 

to decrypt the encrypted E-mail message while said Web encryption communication is 

! 

established between the server and the Web browser of the client, an authentication information 
sending step of sending the authentication information for authentication in said authentication 

step, and a receiving step of receiving the decrypted E-mail message transmitted in said 

I 

transmission step to the client through the Web encryption communication established in said 

i 

web encryption communication step. 
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